MS LIVE · LEGAL & PRIVACY FRAMEWORK
Privacy policy
Controller
Milano Service di Barreto Gomez Miguel Angel (ditta individuale) · VAT no. 10422140961 · Contact address: Corso Lodi 59, Milano (Italia) · info@mslive.it. For any personal data matter write to info@mslive.it.
Data we process
Account (email, name, language, hashed password), favourites, followed artists and alerts, messages sent through contact forms or to MS AI (and the replies of MS AI or the team), contact details and interests you tell us, community reports (anonymous in public), technical security data (IP, browser), your cookie choices and the record of your consents.
Purposes and legal basis
Account, favourites, alerts and replying to your requests: performance of a contract or pre-contractual steps at your request. Managing customer and organiser relationships in the CRM: performance of pre-contractual or contractual steps when you asked for something, and legitimate interest otherwise (professional contact, following up an enquiry), which you may object to. Security and abuse prevention: legitimate interest. Email marketing, commercial follow-ups from the chat and non-essential cookies: only with your specific consent (for email, confirmed by double opt-in), which you can withdraw at any time.
Communications
Notices needed to manage your account or a purchase (account verification, official changes to events you follow, replies to your requests, tickets and confirmations) are transactional and need no commercial consent. Marketing and commercial follow-ups are separate: an optional, unticked-by-default box, specific consent per channel and purpose, and email confirmation in the case of email. You can withdraw at any time with the unsubscribe link in each message, from the chat or by writing to us; we keep the record of the withdrawal. Reminders for unfinished reservations are off by default; if enabled, they are sent only with your commercial consent, without duplicates and never after you complete the purchase.
MS AI
Messages you write to MS AI, and the replies of MS AI or of a team member, are stored to continue the conversation and improve support. They are deleted 30 days after the last activity. Authorised MS staff may read the conversation to help you and supervise the service. Do not write sensitive data. You can ask to talk to a person. More in Artificial intelligence.
CRM and support
To support customers and organisers, MS keeps in its CRM your contact details, commercial interests, relationship status, event enquired about, follow-up and a short summary. It does not keep full transcripts beyond 30 days nor use summaries to rebuild them. It is not sold or passed to third parties for their own purposes.
Providers and hosting
Hosted on Hetzner servers in Nuremberg (Germany, EU). Emails are sent through Brevo. MS AI uses an external language model operated by Groq (USA): to reply to you it is sent the recent conversation history and catalogue data, after emails, phone numbers and card numbers are replaced with placeholders; this transfer outside the EU relies on the safeguards required by the GDPR. When a map is shown, the tile server is OpenStreetMap (OpenStreetMap Foundation, United Kingdom), which receives your IP address and the technical data of the request. If you buy without an account, we create one with the order email so you can recover your tickets (performance of the contract; you can delete it from My account or by writing to info@mslive.it). Payments for purchases on MS LIVE are processed by Stripe (Stripe Payments Europe, Ireland), which receives the payment data and acts as an independent controller of your card details; MS LIVE keeps your name, email, the order and the payment reference for as long as tax and accounting obligations require. Spotify, YouTube and other players load only with your consent.
Provider safeguards
Groq (USA): its data processing agreement is incorporated into its terms of service and includes the EU standard contractual clauses for transfers outside the EEA: https://console.groq.com/docs/legal/customer-data-processing-addendum (sub-processors: https://trust.groq.com/subprocessors). Brevo (email delivery): its data processing agreement is part of its terms of service, with the transfer safeguards it states: https://www.brevo.com/legal/termsofuse/. You can read these official documents; for a copy of the applicable safeguards write to us at info@mslive.it.
Retention
Account and favourites: while the account exists. MS AI conversations, including human replies: 30 days after the last activity. Community reports: 30 days. CRM contacts without an active relationship: up to 24 months after the last interaction, then anonymised or deleted; only data required by a contractual relationship or a legal obligation is kept, for as long as that requires. Consent and withdrawal records: the minimum evidence needed, with no conversation transcripts, while the consent is valid and for at most 5 years after it ends, to be able to prove how it was handled. Backups: the hosting provider (Hetzner) makes automatic daily backups of the server and keeps the 7 most recent; we also keep one-off technical backups taken before software changes, with restricted access, for at most 90 days. Deleted data may remain in those backups until they rotate or are removed; if a backup has to be restored, expired data is deleted again. Technical security logs (including IP): rotated automatically and kept only as long as needed for security and diagnostics.
Your rights
From My account you can download your data and delete the account. You can also request access, rectification, erasure, objection, restriction or portability, and withdraw your consents, by writing to info@mslive.it, and complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Location
“Near me” uses your location only on your device after you press the button; it is not sent to our servers.